legal-claim-economics
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes external data such as claim details and financial terms, which represents a potential surface for indirect prompt injection. The instructions mitigate this risk by requiring the agent to label the source of every input (e.g.,
user_supplied,document_sourced) and maintain these labels in a structured "Audit Bundle" output. This practice establishes clear data boundaries and provenance. - [DATA_EXFILTRATION]: The skill handles sensitive financial and legal information but contains no network operations or external data transfer mechanisms. It includes explicit warnings regarding the preservation of attorney-client privilege and confidentiality when modeling claim economics.
- [COMMAND_EXECUTION]: The skill defines a
calculation_modethat utilizes the agent's standard code execution tools (such as a Python sandbox) for complex mathematical modeling like Monte Carlo simulations. It does not introduce any custom, arbitrary, or insecure command execution patterns within its instructions.
Audit Metadata